Privacy Policy

Last updated: 08.03.2026

1. Introduction

At Mateup, we are committed to protecting the privacy of our users and securely processing their personal data. This Privacy Policy explains how your personal data is collected, used, stored, and protected.

2. Data We Collect

Through our platform, we may collect the following personal data:

Name, surname, and contact information
Email address and phone number
Event photos
Face data (details explained below)
Account information and preferences
Usage data and analytics information

3. Face Data Policy

3.1. Face Data We Collect

Mateup collects the following types of face data:

Face Liveness Verification: To verify that you are a real person for account security purposes
Face Recognition Data (Face Embeddings): Mathematical representations of your face for automatic photo tagging at events

Important: We do not store actual face images. We only store mathematical representations (embeddings) that cannot be reverse-engineered into your face image.

3.2. Why We Collect Face Data

Face data is used exclusively for the following purposes:

Account Security: To ensure account security and prevent fake accounts through face liveness verification
Automatic Photo Tagging: To automatically identify and tag users in event photos, making it easier to find your photos
User Experience: To improve the overall user experience and provide personalized features

We do not use face data for advertising, marketing, or any other purposes not explicitly stated here.

3.3. How Long We Store Face Data

Face Liveness Verification Data:

Face liveness verification data is automatically deleted within 15 minutes after the verification process is completed
Only the verification result (success/failure) and confidence score are permanently stored
The actual face images or video frames used during verification are not retained

Face Recognition Data (Face Embeddings):

Face embeddings are stored in our secure systems only while your account is active
A separate collection is maintained for each event you participate in
When you delete your account, all face data is permanently deleted from all collections
Face data is stored as long as necessary to provide the photo tagging service

We store face data for the minimum time necessary to provide our services. You can request deletion at any time.

3.4. Third-Party Sharing

We use GDPR and SOC 2 compliant service providers for face recognition processing:

Compliance: Our service providers meet international data protection standards
Data Processing Agreement: Face data is processed only according to our instructions
No Secondary Use: Service providers do not use face data for their own purposes or share it with other parties
Secure Storage: Data is stored encrypted in secure data centers
Data Retention: Face data is retained only as long as necessary and deleted when we request

Face data is NOT shared with any third parties outside of our authorized service providers.

3.5. How to Delete Your Face Data

You can delete your face data at any time:

Account Deletion: Use the "Delete Account" option in account settings to permanently delete all your data, including face data
Complete Removal: Account deletion removes all face data from our systems
Irreversible: The deletion process is irreversible and data cannot be recovered
Photo Handling: Photos where you appear alone are deleted; in photos with others, only your tag is removed
Timeline: Face data deletion is processed immediately upon account deletion

To request face data deletion without deleting your entire account, please contact us at info@mateup.co

3.6. Your Rights Regarding Face Data

You have the following rights regarding your face data:

Right to Know: You have the right to know what face data is collected and how it is used
Right to Access: You can request access to your face data
Right to Delete: You can request deletion of your face data at any time
Right to Opt-Out: You can choose not to use face recognition features (except for event creation which requires verification)
Right to Object: You can object to the processing of your face data
Right to Portability: You can request a copy of your face data in a machine-readable format

To exercise any of these rights, please contact us at info@mateup.co

3.7. Face Data Security

We implement robust security measures to protect your face data:

Encryption: All face data is encrypted at rest (AES-256) and in transit (TLS 1.2+)
Access Control: Strict access controls limit who can access face data
Monitoring: Continuous monitoring for unauthorized access attempts
Regular Audits: Regular security audits and vulnerability assessments
Infrastructure Security: SOC 2 and ISO 27001 certified secure infrastructure

4. Use of Other Data

Personal data other than face data is used for the following purposes:

To provide and improve our services
To personalize user experience
To send communications and notifications
To ensure security and prevent fraud
To comply with legal obligations

5. Data Security

We use industry-standard security measures to protect your personal data:

All data is encrypted at rest (AES-256)
SSL/TLS encryption is used during transmission
Access controls and authentication systems
Regular security audits and updates
SOC 2 and ISO 27001 certified secure infrastructure

6. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

Right to access your personal data
Right to request correction of your data
Right to request deletion of your data ("Right to be Forgotten")
Right to object to data processing
Right to data portability
Right to object to automated decision-making

To exercise these rights, please contact us at info@mateup.co

7. Contact Us

If you have any questions about our privacy policy or face data processing practices, please contact us:

CHECKMATE FUTURE YAZILIM TEKNOLOJİ A.Ş.
Email: info@mateup.co
Address: Porta Vadi T-3 Blok No: 44, 34398, Hamidiye Mah. Cendere Cad., Kağıthane, İstanbul — Turkey
Last updated: 08.03.2026

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.